http://evilrouters.net/2009/07/04/eigrp-authentication/ im in ur datacentrz configurin' ur routerz Fri, 12 Mar 2010 14:46:35 +0000 http://wordpress.org/?v=2.9.2 hourly 1 http://evilrouters.net/2009/07/04/eigrp-authentication/comment-page-1/#comment-1447 felixbourne Tue, 07 Jul 2009 20:32:34 +0000 http://evilrouters.net/2009/07/04/eigrp-authentication/#comment-1447 <p>Could an attacker spoof the address of another router in order to kill a competitor's adjacency? A flood of such crafted packets could be an effective DoS.</p> Could an attacker spoof the address of another router in order to kill a competitor’s adjacency? A flood of such crafted packets could be an effective DoS.

]]> http://evilrouters.net/2009/07/04/eigrp-authentication/comment-page-1/#comment-1442 jlgaddis Tue, 07 Jul 2009 03:00:44 +0000 http://evilrouters.net/2009/07/04/eigrp-authentication/#comment-1442 <p>Hmm, is it really a security vulnerability, invalidCCIE? I'm inclined to think that it's not since, at that point, R1 is only expecting authenticated updates. If an update comes in that isn't authenticated, I think it's probably doing the right thing. I'd love to hear more on why you think it is a vulnerability, though.</p> Hmm, is it really a security vulnerability, invalidCCIE? I’m inclined to think that it’s not since, at that point, R1 is only expecting authenticated updates. If an update comes in that isn’t authenticated, I think it’s probably doing the right thing. I’d love to hear more on why you think it is a vulnerability, though.

]]> http://evilrouters.net/2009/07/04/eigrp-authentication/comment-page-1/#comment-1439 invalidCCIE Mon, 06 Jul 2009 12:25:16 +0000 http://evilrouters.net/2009/07/04/eigrp-authentication/#comment-1439 <p>pay attention to one interesting thing: if R1 receives hello packet with invalid authentication from address of R2, it immediately drops adjacency (not just ignore incorrect packet). from my point of view, it is security vulnerability :)</p> pay attention to one interesting thing: if R1 receives hello packet with invalid authentication from address of R2, it immediately drops adjacency (not just ignore incorrect packet). from my point of view, it is security vulnerability

]]>